Merge pull request #8164 from hregis/6.0_bug

Fix: nocheck for "fournisseur", already check with "societe"
Dolibarr · Feb 14, 2018 · 27c5563 · 27c5563
2 parents 4d6f87e + 23ee674
commit 27c5563
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/htdocs/product/fournisseurs.php b/htdocs/product/fournisseurs.php
@@ -63,7 +63,9 @@
 $fieldvalue = (! empty($id) ? $id : (! empty($ref) ? $ref : ''));
 $fieldtype = (! empty($ref) ? 'ref' : 'rowid');
 if ($user->societe_id) $socid=$user->societe_id;
-$result=restrictedArea($user,'produit|service&fournisseur',$fieldvalue,'product&product','','',$fieldtype);
+$result=restrictedArea($user,'produit|service',$fieldvalue,'product&product','','',$fieldtype);
+
+if (empty($user->rights->fournisseur->lire)) accessforbidden();
 
 $limit = GETPOST('limit','int')?GETPOST('limit','int'):$conf->liste_limit;
 $sortfield = GETPOST("sortfield",'alpha');